In a new advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444), Microsoft mentions (normal, their product) that Microsoft Defender... provide detection and protections for the known vulnerability. Also... alerts will be disp...
Forum Posts
Detection W32.7C9F454E6E-95.SBX.TGFingerprint (SHA-256) 7c9f454e6e3efb67fef761dc40446e854056c9bcd753c505bda539f531e2147eFile Name streetsidesoftware.code-spell-checker-2.0.4File Size 2 MBParent Filena...
AMP4E gurus, App whitelisting allows only pre-approved and specified programs to run. Any other program not whitelisted is blocked by default.Is this doable in AMP4E?Or it would scan new apps and allow if clean ?!
Looks like we have have another FP... Reported to Talos, and opened a TAC case... we'll see who clears it up first... Detection: W32.1DC5CC50C1.MPOKE.RET.SBX.TGFile: notification_helper.exeFile path: \\?\C:\Program Files (x86)\Google\Chrome\Temp\sou...
Hello Cisco team. the following file has been marked as malicious. Am yet to open a TAC case. We believe that it may be a false positive. The most recent commit was pushed to Github at 01/09/2021, 23:32:19 https://marketplace.visualstudio.com/items?i...
I'm brand new to the Meraki world, so maybe this is a basic thing.. I've set up an Org and Network which works fine on the web Dashboard on macOS BigSur.. I can config my MX75, cameras, etc.. When I install the iOS app on my phone, and log in, no net...
Hello AllI need to allow a group of the same mac adresses to access to more than 1 zoneis it possible to use 802.1x for that? Thanks a lot
I have several Windows laptops that started to have problems with Chrome after installing AMP.This happens occasionally and only with Windows machines.Chrome will not launch at all and if AMP is uninstall Chrome resumes working properly.I tried unins...
tHow does Threat Grid operate once an organization exceeds its submission rate limits? Does it ignore / no longer inspect files at that point until the 24 hour rolling window resets?
Experiencing an issue where certain endpoints cannot be located from any search function in the Secure Endpoint dashboard. There have been a few endpoints where I've wanted to investigate that have the agent installed, either version 7.4.3.20679 or ...
Just need the response to the question:Does Cisco AMP support remote iphone scanning?
Received an email that endpoint detected a DFC Threat. the file has been quarantined but whatever is calling it on reboot still remains. I've done a full system scan, cleaned Internet temp files and cookies and browser cache. What should I try nex...
I found a previous post showing how to hit the "View Source" button to pull up highlighted portions of the IOC that were supposedly discovered in the scan. However, this seems to be inaccurate. Here is an example... So the highlighted items are ...
The console is painfully slow right now. Anyone else? I'm guessing they're having problems because everyone is updating to the latest connector due to the BSOD bug.
currently, we are using compliance module 4.3.1728.6145 and anyconnect version 4.9.06037 we are observing that the USB real-time block is not working. previously it was working and then it stopped. could it be related to the windows patch. how can w...
